| 3 Apr 2024 |
raitobezarius | If I understand well what they're trying to do | 11:56:52 |
raitobezarius | The most interesting thing in our context is the verification of the binary reproducibility as part of the build process itself | 11:57:08 |
raitobezarius | (or the source equivalence, which is harder) | 11:57:14 |
raitobezarius | Binary repro would have no caught the xz situation in our case | 11:57:22 |
raitobezarius | * Binary repro would have not caught the xz situation in our case | 11:57:26 |
raitobezarius | Good source equivalence would have | 11:57:54 |